Researcher flags calernix.cfd phishing site impersonating Mitsubishi UFJ eSmart Securities
@masaomi346 reported on 2 November 2026 that calernix.cfd is a phishing site copying the login page of Mitsubishi UFJ eSmart Securities, a Japanese online brokerage. The brokerage does not operate the site.
- First reported
- Reports
- 1
Source: x.com · published
What happened
Japanese security researcher @masaomi346 posted on X on 2 November 2026 that hxxps://calernix.cfd/Login/#/index is a phishing site impersonating 三菱UFJ eスマート証券 (Mitsubishi UFJ eSmart Securities), a Japanese online brokerage. The post is tagged #Phishing and #フィッシング詐欺 (phishing fraud) and includes a screenshot of the page. The domain calernix.cfd is not operated by the brokerage.
How the scam works
The screenshot, taken on a phone, shows a login page with the MUFG logo and the brokerage's name at the top. It asks for an eight-digit account number, with an orange “Next” button and a second orange button to sign in with a passkey. Below are notes about resetting a forgotten password. The address bar shows calernix.cfd, which has nothing to do with the real company.
The layout copies the real site's step-by-step sign-in, where the account number comes first and the password is asked for afterwards. A copy of that first screen is enough to start collecting details. After the account number, a phishing page typically asks for the password, trading PIN, one-time codes or other details, and a login on the genuine site then follows with the stolen information. Accounts at an online broker can be used to buy and sell securities and to move money, so a takeover can be costly and fast.
The post does not say how the link was delivered. Fake brokerage pages in Japan are usually sent through emails and text messages that warn about a problem with an account, a login from a new device or a pending verification. The safest habit is to open the brokerage's own app or a saved bookmark rather than follow a message.
Source
@masaomi346 on X, post of 2 November 2026 (screenshot). Not independently verified by scammers.com.
Red flags
- A login page for Mitsubishi UFJ eSmart Securities on the unrelated domain calernix.cfd.
- A sign-in page reached through a link in an email or text message.
- A page asking for an eight-digit account number and then more login details.
- A copied logo and button style that mimic the real brokerage's login.
- A web address ending in .cfd instead of the company's official domain.
If you were targeted
- 1Do not enter any details on calernix.cfd.
- 2If you did, contact the brokerage through its official app or website, and change your password and PIN.
- 3Check your account for orders, transfers and changes you did not make.
- 4Log in only through the official app or a bookmarked address, never through a link in a message.
- 5Report phishing messages to the brokerage and to the Japan Anti-Phishing Council.